CVE-2026-53055: Linux Kernel HiSilicon SEC2 Crypto Driver Use-After-Free
CVE-2026-53055 is a use-after-free flaw (CWE-416) in the HiSilicon SEC2 crypto driver of the Linux kernel. According to the record, hardware can free a request structure before the transmission routine finishes using it, and the fix replaces that request reference with the qp_ctx context memory. The record gives a CVSS 3.1 base score of 9.8 and links stable-kernel fix commits for the affected version ranges.
Overview
CVE-2026-53055 affects the HiSilicon SEC2 crypto driver in the Linux kernel. The record describes a race between packet transmission and hardware completion: under heavy load, the hardware can complete processing and free the request memory (req) before the transmission function finishes, so later software access to that request is a use-after-free. The stated fix replaces the req reference with the qp_ctx structure, which the record says exists for the whole packet-sending process.
Impact
- The record classifies the weakness as CWE-416 (Use After Free).
- The CNA-provided CVSS 3.1 base score is 9.8, with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high confidentiality, integrity and availability impact as scored by the provider.
- Use-after-free conditions can lead to memory corruption; the record does not describe the specific consequences observed in this driver.
Affected products and versions
- Product in the record: Linux Linux Kernel.
- Affected ranges listed: from 6.17 up to but not including 6.18.33, and from 6.19 up to but not including 7.0.10.
- Systems outside these ranges are not listed as affected in the record, but the record does not state whether other branches or distribution kernels carry the same code.
Exploitation status
The record shows that this CVE is not listed in the CISA Known Exploited Vulnerabilities catalog and has no EPSS score. No confirmed exploitation appears in the sources consulted.
Remediation and mitigation
- Update the Linux kernel to a stable release that includes the fix for your branch. The record links stable-kernel commits: commit 67b53a66, commit ad73563f and commit b375c3c7.
- Prioritise systems that use the HiSilicon SEC2 accelerator and run under heavy cryptographic workload, as those are the conditions described in the record.
- Check your distribution vendor advisories for backported fixes, since the record does not list vendor-specific patches.
Detection guidance
- Inventory kernel versions against the affected ranges listed above.
- Identify hosts where the HiSilicon SEC2 driver is present or in use.
- Monitor kernel logs for memory-safety warnings from the crypto subsystem, bearing in mind that the record does not describe specific log signatures.
Limitations of the available information
- The record gives no detailed exploitation conditions, proof-of-concept or observed attacks.
- The record does not state the privilege level or access required to trigger the flaw; the CVSS vector is taken as provided by the CNA.
- No EPSS score or SSVC data is available.
- Distribution-specific fix status is unknown from the record.
Frequently asked questions
What is the root cause of CVE-2026-53055?
According to the record, the hardware can complete packet processing and free the request memory before the transmission function finishes, and later software access to that request causes a use-after-free.
Is this CVE known to be actively exploited?
No. The record shows the CVE is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted.
Which kernel versions are affected?
The record lists versions from 6.17 up to but not including 6.18.33, and from 6.19 up to but not including 7.0.10.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.